CVE-2026-102212

UNKNOWN 0.0

Pre-Auth Heap Buffer Overflow in the Multipart Request

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.

CWE	CWE-122
Vendor	opengear
Product	im7200
Published	Oct 31, 2026

Stay Ahead of the Next One

Get instant alerts for opengear im7200

Be the first to know when new unknown vulnerabilities affecting opengear im7200 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Opengear / IM7200

4.8 ≤ 5.5.2

Opengear / CM7100

4.8 ≤ 5.5.2

Opengear / ACM7000

4.8 ≤ 5.5.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

portal.opengear.com: https://portal.opengear.com/customerservice/s/article/Release-Notification-Firmware-Version-5-5-3-is-Now-Generally-Available portal.opengear.com: https://portal.opengear.com/customerservice/s/article/CVE-2026-102212-Opengear-Console-Server-Buffer-Overflow-to-RCE

Credits

Nick Cerne of Armadin